How do I determine DoS Virtual Carrier Attack info?

[Joemonkey]

Previous issue in this thread: http://forums.anandtech.com/me...=2184468&enterthread=y

Been having issues with my wireless for about a week and a half, constant disconnects, gone through 3 routers in differnet locaitons in the house, doesn't help. Borrowed the Air Magnet card and software from work, hooked it up on my laptop, and I CONSTANTLY see this in the AirWISE portion, even with my WAP and wireless card disabled.

IDS - Denial of Service attack
DoS attack against infrastructure
DoS: Virtual Carrier attack
DoS: Virtual Carrier attack channel 6

I've changed my channel to 1, then to 11, and currently have no issues, but I did that before as well and the intermittent disconnects continued. Across the road is an elementary school that has somewhere between 12 and 20 WAPs, and every now and then it will pick up a few other WAPs with very very low SNR.

It is also picking up excessive multicast/broadcase and excessive packet errors on the APs at the school.

WTF can I do next? Get all vigilante on WAPs in my neighborhood w/ my airmagnet's Find ability?

 

[spidey07]

Sounds like they have a Cisco solution. It will actively target noise and rogue access points to maintain the integrity of their radios.

 

[Joemonkey]

Originally posted by: spidey07
Sounds like they have a Cisco solution. It will actively target noise and rogue access points to maintain the integrity of their radios.

Mac address search says Cisco-Linksys, LLC for it, so very likely. However, it isn't coming from the school, all their APs are Enterasys

hrm... now wtf is going on, I just saw that 6 APs over at the school switched from channel 6 to channel 1... me thinks my wireless will be blinking out very soon again...

 

[spidey07]

*chuckle*

Also, business class solutions will do that - change channels to what works best. They also get alerts when somebody is running netstumbler or airmagnet.

How close are you and what kinds of antennas are you using? You may get better results using a patch or 180 degree panel antenna.

 

[nightowl]

Originally posted by: spidey07
Sounds like they have a Cisco solution. It will actively target noise and rogue access points to maintain the integrity of their radios.

Spidey, no the Cisco hardware will not do that. It has to be initiated by the administrator.


OP, are all of the school's APs on the same channel?

 

[spidey07]

Originally posted by: nightowl

Originally posted by: spidey07
Sounds like they have a Cisco solution. It will actively target noise and rogue access points to maintain the integrity of their radios.

Spidey, no the Cisco hardware will not do that. It has to be initiated by the administrator.


OP, are all of the school's APs on the same channel?

meh, I do it for fun.

 

[Joemonkey]

Originally posted by: nightowl

Originally posted by: spidey07
Sounds like they have a Cisco solution. It will actively target noise and rogue access points to maintain the integrity of their radios.

Spidey, no the Cisco hardware will not do that. It has to be initiated by the administrator.


OP, are all of the school's APs on the same channel?

Netstumbler told me they weren't, but airmagnet says they are, not sure who to believe.